The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Nov 3, 2023 |
| Debian | — | Upgrade python-django | Sep 11, 2023 | Sep 11, 2023 |
| Freebsd | — | Upgrade py311-django32Upgrade py311-django42Upgrade py311-django41Upgrade py38-django32Upgrade py310-django42Upgrade py310-django32Upgrade py39-django32Upgrade py38-django41Upgrade py310-django41Upgrade py39-django41Upgrade py39-django42Upgrade py38-django42 | Dec 10, 2025 | Sep 4, 2023 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Ubuntu | — | Upgrade python3-djangoUpgrade python3-django (Ubuntu Pro) | Sep 19, 2023 | Sep 18, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub